build(deps): bump fastify from 4.9.2 to 4.10.2 #10

Closed

dependabot[bot] wants to merge 1 commit from dependabot/npm_and_yarn/fastify-4.10.2 into 2021

dependabot[bot] commented

2022-11-21 22:42:12 +00:00

(Migrated from github.com)

Bumps fastify from 4.9.2 to 4.10.2.

Release notes

Sourced from fastify's releases.

v4.10.2

⚠️ Security Release ⚠️

Fix for "Incorrect Content-Type parsing can lead to CSRF attack" and CVE-2022-41919

Full Changelog: https://github.com/fastify/fastify/compare/v4.10.1...v4.10.2

v4.10.1

What's Changed

fix node 19.1.0 port validation test by @Uzlopak in fastify/fastify#4427

Add fastify-constraints to community plugins by @Ceres6 in fastify/fastify#4428

build(deps-dev): bump @sinonjs/fake-timers from 9.1.2 to 10.0.0 by @dependabot in fastify/fastify#4421

add silent option to LogLevel by @Uzlopak in fastify/fastify#4432

New Contributors

@Ceres6 made their first contribution in fastify/fastify#4428

Full Changelog: https://github.com/fastify/fastify/compare/v4.10.0...v4.10.1

v4.10.0

What's Changed

docs(reference/reply): spelling fixes by @Fdawgs in fastify/fastify#4358

Support different content-type typed reply with TypeProvider by @rain714 in fastify/fastify#4360

chore: remove leading empty lines by @LinusU in fastify/fastify#4364

fix types after pino 8.7.0 change by @mcollina in fastify/fastify#4365

Node.js V19 support by @mcollina in fastify/fastify#4366

fix: no check on null or undefined values passed as fn by @metcoder95 in fastify/fastify#4367

docs(server): config is lost when reply.call not found() is called by @cesarvspr in fastify/fastify#4368

Fix typo - 'sever' to 'server' by @utsav91 in fastify/fastify#4372

Add platformatic to the Acknowledgements by @mcollina in fastify/fastify#4378

docs: add Simone Busoli to plugin maintainers by @simoneb in fastify/fastify#4379

add missing 'validationContext' field to FastifyError type by @jakubburzynski in fastify/fastify#4363

fix(type-providers): assignability of instance with enabled type provider by @driimus in fastify/fastify#4371

feat: support async trailer by @climba03003 in fastify/fastify#4380

fix: trailers async race condition by @climba03003 in fastify/fastify#4383

docs(ecosystem): Add fastify-list-routes by @chuongtrh in fastify/fastify#4385

build(deps-dev): bump @sinclair/typebox from 0.24.51 to 0.25.2 by @dependabot in fastify/fastify#4388

[ Fix ] Improve error message for hooks check by @debadutta98 in fastify/fastify#4387

fix: tiny-lru usage by @climba03003 in fastify/fastify#4391

Removes old note about named imports in ESM by @fox1t in fastify/fastify#4392

docs: Add section about capacity planning by @kibertoad in fastify/fastify#4386

docs(recommendations): grammar fixes by @Fdawgs in fastify/fastify#4396

chore(doc): duplicated menu item by @Eomm in fastify/fastify#4398

feat: add request.routeOptions object by @debadutta98 in fastify/fastify#4397

docs: Document multiple app approach by @kibertoad in fastify/fastify#4393

fix example using db decorator on fastify instance by @mmarti in fastify/fastify#4406

docs: fix removeAdditional refer by @shunyue1320 in fastify/fastify#4410

... (truncated)

Commits

62dde76 Merge pull request from GHSA-3fjj-p79j-c9hh
6fc06c1 Bumped v4.10.1
a8873ef add silent option to LogLevel (#4432)
9c1be2a build(deps-dev): bump @sinonjs/fake-timers from 9.1.2 to 10.0.0 (#4421)
9c85bed Add fastify-constraints to community plugins (#4428)
36d84bc fix node 19.1.0 port validation test (#4427)
3767bc2 Bumped v4.10.0
5c8039c docs: fix removeAdditional refer (#4410)
ea58581 docs: fix example using db decorator on fastify instance (#4406)
675b00d docs: Document multiple app approach (#4393)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [fastify](https://github.com/fastify/fastify) from 4.9.2 to 4.10.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/fastify/fastify/releases">fastify's releases</a>.</em></p> <blockquote> <h2>v4.10.2</h2> <h2>⚠️ Security Release ⚠️</h2> <ul> <li>Fix for <a href="https://github.com/fastify/fastify/security/advisories/GHSA-3fjj-p79j-c9hh">"Incorrect Content-Type parsing can lead to CSRF attack"</a> and CVE-2022-41919</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/fastify/fastify/compare/v4.10.1...v4.10.2">https://github.com/fastify/fastify/compare/v4.10.1...v4.10.2</a></p> <h2>v4.10.1</h2> <h2>What's Changed</h2> <ul> <li>fix node 19.1.0 port validation test by <a href="https://github.com/Uzlopak"><code>@Uzlopak</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4427">fastify/fastify#4427</a></li> <li>Add fastify-constraints to community plugins by <a href="https://github.com/Ceres6"><code>@Ceres6</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4428">fastify/fastify#4428</a></li> <li>build(deps-dev): bump <code>@sinonjs/fake-timers</code> from 9.1.2 to 10.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4421">fastify/fastify#4421</a></li> <li>add silent option to LogLevel by <a href="https://github.com/Uzlopak"><code>@Uzlopak</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4432">fastify/fastify#4432</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Ceres6"><code>@Ceres6</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4428">fastify/fastify#4428</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/fastify/fastify/compare/v4.10.0...v4.10.1">https://github.com/fastify/fastify/compare/v4.10.0...v4.10.1</a></p> <h2>v4.10.0</h2> <h2>What's Changed</h2> <ul> <li>docs(reference/reply): spelling fixes by <a href="https://github.com/Fdawgs"><code>@Fdawgs</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4358">fastify/fastify#4358</a></li> <li>Support different content-type typed reply with TypeProvider by <a href="https://github.com/rain714"><code>@rain714</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4360">fastify/fastify#4360</a></li> <li>chore: remove leading empty lines by <a href="https://github.com/LinusU"><code>@LinusU</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4364">fastify/fastify#4364</a></li> <li>fix types after pino 8.7.0 change by <a href="https://github.com/mcollina"><code>@mcollina</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4365">fastify/fastify#4365</a></li> <li>Node.js V19 support by <a href="https://github.com/mcollina"><code>@mcollina</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4366">fastify/fastify#4366</a></li> <li>fix: no check on <code>null</code> or <code>undefined</code> values passed as fn by <a href="https://github.com/metcoder95"><code>@metcoder95</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4367">fastify/fastify#4367</a></li> <li>docs(server): config is lost when reply.call not found() is called by <a href="https://github.com/cesarvspr"><code>@cesarvspr</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4368">fastify/fastify#4368</a></li> <li>Fix typo - 'sever' to 'server' by <a href="https://github.com/utsav91"><code>@utsav91</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4372">fastify/fastify#4372</a></li> <li>Add platformatic to the Acknowledgements by <a href="https://github.com/mcollina"><code>@mcollina</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4378">fastify/fastify#4378</a></li> <li>docs: add Simone Busoli to plugin maintainers by <a href="https://github.com/simoneb"><code>@simoneb</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4379">fastify/fastify#4379</a></li> <li>add missing 'validationContext' field to FastifyError type by <a href="https://github.com/jakubburzynski"><code>@jakubburzynski</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4363">fastify/fastify#4363</a></li> <li>fix(type-providers): assignability of instance with enabled type provider by <a href="https://github.com/driimus"><code>@driimus</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4371">fastify/fastify#4371</a></li> <li>feat: support async trailer by <a href="https://github.com/climba03003"><code>@climba03003</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4380">fastify/fastify#4380</a></li> <li>fix: trailers async race condition by <a href="https://github.com/climba03003"><code>@climba03003</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4383">fastify/fastify#4383</a></li> <li>docs(ecosystem): Add fastify-list-routes by <a href="https://github.com/chuongtrh"><code>@chuongtrh</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4385">fastify/fastify#4385</a></li> <li>build(deps-dev): bump <code>@sinclair/typebox</code> from 0.24.51 to 0.25.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4388">fastify/fastify#4388</a></li> <li>[ Fix ] Improve error message for hooks check by <a href="https://github.com/debadutta98"><code>@debadutta98</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4387">fastify/fastify#4387</a></li> <li>fix: tiny-lru usage by <a href="https://github.com/climba03003"><code>@climba03003</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4391">fastify/fastify#4391</a></li> <li>Removes old note about named imports in ESM by <a href="https://github.com/fox1t"><code>@fox1t</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4392">fastify/fastify#4392</a></li> <li>docs: Add section about capacity planning by <a href="https://github.com/kibertoad"><code>@kibertoad</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4386">fastify/fastify#4386</a></li> <li>docs(recommendations): grammar fixes by <a href="https://github.com/Fdawgs"><code>@Fdawgs</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4396">fastify/fastify#4396</a></li> <li>chore(doc): duplicated menu item by <a href="https://github.com/Eomm"><code>@Eomm</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4398">fastify/fastify#4398</a></li> <li>feat: add request.routeOptions object by <a href="https://github.com/debadutta98"><code>@debadutta98</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4397">fastify/fastify#4397</a></li> <li>docs: Document multiple app approach by <a href="https://github.com/kibertoad"><code>@kibertoad</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4393">fastify/fastify#4393</a></li> <li>fix example using db decorator on fastify instance by <a href="https://github.com/mmarti"><code>@mmarti</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4406">fastify/fastify#4406</a></li> <li>docs: fix removeAdditional refer by <a href="https://github.com/shunyue1320"><code>@shunyue1320</code></a> in <a href="https://github-redirect.dependabot.com/fastify/fastify/pull/4410">fastify/fastify#4410</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/fastify/fastify/commit/62dde76f1f7aca76e38625fe8d983761f26e6fc9"><code>62dde76</code></a> Merge pull request from GHSA-3fjj-p79j-c9hh</li> <li><a href="https://github.com/fastify/fastify/commit/6fc06c12c5021cf41ce632bcc902ad66637d15b3"><code>6fc06c1</code></a> Bumped v4.10.1</li> <li><a href="https://github.com/fastify/fastify/commit/a8873ef924d51e84549facf63cf1153f8521362b"><code>a8873ef</code></a> add silent option to LogLevel (<a href="https://github-redirect.dependabot.com/fastify/fastify/issues/4432">#4432</a>)</li> <li><a href="https://github.com/fastify/fastify/commit/9c1be2ab56cca0125b48666241dc4ff5338b69d8"><code>9c1be2a</code></a> build(deps-dev): bump <code>@sinonjs/fake-timers</code> from 9.1.2 to 10.0.0 (<a href="https://github-redirect.dependabot.com/fastify/fastify/issues/4421">#4421</a>)</li> <li><a href="https://github.com/fastify/fastify/commit/9c85bed1b511fd218ce1caf2fb59dc146ecb7aa4"><code>9c85bed</code></a> Add fastify-constraints to community plugins (<a href="https://github-redirect.dependabot.com/fastify/fastify/issues/4428">#4428</a>)</li> <li><a href="https://github.com/fastify/fastify/commit/36d84bce78f2d4b2bc8255c1432160d49776e8fe"><code>36d84bc</code></a> fix node 19.1.0 port validation test (<a href="https://github-redirect.dependabot.com/fastify/fastify/issues/4427">#4427</a>)</li> <li><a href="https://github.com/fastify/fastify/commit/3767bc262d17b2e9c39aaef7642d03571e7f358c"><code>3767bc2</code></a> Bumped v4.10.0</li> <li><a href="https://github.com/fastify/fastify/commit/5c8039c40e11be4a9c3617c145cd2667e0c68f24"><code>5c8039c</code></a> docs: fix removeAdditional refer (<a href="https://github-redirect.dependabot.com/fastify/fastify/issues/4410">#4410</a>)</li> <li><a href="https://github.com/fastify/fastify/commit/ea585810695948fff9e0bf185b81ffa1b4b71ae7"><code>ea58581</code></a> docs: fix example using db decorator on fastify instance (<a href="https://github-redirect.dependabot.com/fastify/fastify/issues/4406">#4406</a>)</li> <li><a href="https://github.com/fastify/fastify/commit/675b00d6ca7a7eeaad073e6469c70b50fcd532eb"><code>675b00d</code></a> docs: Document multiple app approach (<a href="https://github-redirect.dependabot.com/fastify/fastify/issues/4393">#4393</a>)</li> <li>Additional commits viewable in <a href="https://github.com/fastify/fastify/compare/v4.9.2...v4.10.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fastify&package-manager=npm_and_yarn&previous-version=4.9.2&new-version=4.10.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/katlyn/katlyn.dev/network/alerts). </details>

dependabot[bot] commented

2022-12-12 08:38:56 +00:00

(Migrated from github.com)

Looks like fastify is up-to-date now, so this is no longer needed.